Servers Playground How we check Add a server Log in

Distributed Risk desk

Working Security A

com.distributedrisk/deskv1.5.0 Domain verified

Read the Distributed Risk desk notes and the official US record they cite.

Research & Knowledge

Watch Website Registry entry

Maintain this server? Claim it

Try it

Call this server's tools from your browser. Nothing to install.

https://www.distributedrisk.com/mcp

Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.

Tool list from our last check. Connect live to refresh it.

get_cve Read-only

Everything the record says about one CVE, in one answer: the CVE.org record (description, severity, weakness, affected products, references), CISA's exploitation call (SSVC) and its KEV listing with the federal due date, FIRST's EPSS estimate, and whether it sits in the AI and agent software stack.

cvestring, required

For example CVE-2025-62593.

Distributed Risk desk MCP server | mcptry

Tools (14)

get_cve

read-only

Argument	Type	Description
cve*	string	For example CVE-2025-62593.

Input schema (JSON)

{
  "type": "object",
  "required": [
    "cve"
  ],
  "properties": {
    "cve": {
      "type": "string",
      "pattern": "^[Cc][Vv][Ee]-\\d{4}-\\d{4,}$",
      "description": "For example CVE-2025-62593."
    }
  },
  "additionalProperties": false
}

get_note

One published note in full (Markdown), with its numbered sources and links to the official record.

read-only

Argument	Type	Description
slug*	string	The note's slug, from list_notes or search_notes.

Input schema (JSON)

{
  "type": "object",
  "required": [
    "slug"
  ],
  "properties": {
    "slug": {
      "type": "string",
      "maxLength": 200,
      "minLength": 1,
      "description": "The note's slug, from list_notes or search_notes."
    }
  },
  "additionalProperties": false
}

get_reference_rates

The New York Fed's reference rates: EFFR and OBFR (unsecured), SOFR, BGCR and TGCR (secured), and the SOFR averages and index (SOFRAI). With no rate, the latest of each; with a rate, its last N days, with percentiles, volume and, for EFFR, the target range.

read-only

Argument	Type	Description
last	integer	How many days of history, when a rate is given.
rate	string	One rate, for its history. Omit for the latest of all.

Input schema (JSON)

{
  "type": "object",
  "properties": {
    "last": {
      "type": "integer",
      "default": 5,
      "maximum": 60,
      "minimum": 1,
      "description": "How many days of history, when a rate is given."
    },
    "rate": {
      "enum": [
        "EFFR",
        "OBFR",
        "SOFR",
        "BGCR",
        "TGCR",
        "SOFRAI"
      ],
      "type": "string",
      "description": "One rate, for its history. Omit for the latest of all."
    }
  },
  "additionalProperties": false
}

get_treasury_yields

Treasury's daily par yield curve, newest first: yields by tenor from 1 month to 30 years. Ask for the last N days, and optionally only some tenors (for example ["2 Yr", "10 Yr"]).

read-only

Argument	Type	Description
last	integer	How many business days.
tenors	array	Tenors as Treasury names them: 1 Mo, 3 Mo, 6 Mo, 1 Yr, 2 Yr, 5 Yr, 10 Yr, 30 Yr…

Input schema (JSON)

{
  "type": "object",
  "properties": {
    "last": {
      "type": "integer",
      "default": 1,
      "maximum": 30,
      "minimum": 1,
      "description": "How many business days."
    },
    "tenors": {
      "type": "array",
      "items": {
        "type": "string",
        "maxLength": 12
      },
      "maxItems": 16,
      "description": "Tenors as Treasury names them: 1 Mo, 3 Mo, 6 Mo, 1 Yr, 2 Yr, 5 Yr, 10 Yr, 30 Yr…"
    }
  },
  "additionalProperties": false
}

list_ai_stack_vulnerabilities

New advisories against the software AI agents run on, newest and most severe first: agent frameworks (LangChain, LlamaIndex, CrewAI, n8n, Langflow), LLM gateways (LiteLLM), MCP servers and SDKs, model serving (vLLM, Ollama), ML platforms (MLflow, Ray, Jupyter), model libraries, AI apps and coding agents. Malicious-package reports (a compromised or lookalike release) come first. CISA KEV entries in the same stack are included. Each with package, severity, fixed versions, CVEs, EPSS and the advisory.

read-only

Argument	Type	Description
kind	string
layer	string	One layer of the stack.
limit	integer
since	string	Advisories dated on or after this day (YYYY-MM-DD). Default 14 days ago; reaches back 30 days.
package	string	One package name, for example litellm or @modelcontextprotocol/sdk.
include_kev	boolean	Include CISA KEV entries for AI-stack products added in the window.

Input schema (JSON)

{
  "type": "object",
  "properties": {
    "kind": {
      "enum": [
        "malicious_package",
        "vulnerability"
      ],
      "type": "string"
    },
    "layer": {
      "enum": [
        "agent_framework",
        "llm_gateway",
        "mcp",
        "model_serving",
        "ml_platform",
        "model_library",
        "ai_app",
        "coding_agent",
        "gpu_infra",
        "ai_assistant",
        "ai_systems"
      ],
      "type": "string",
      "description": "One layer of the stack."
    },
    "limit": {
      "type": "integer",
      "default": 15,
      "maximum": 50,
      "minimum": 1
    },
    "since": {
      "type": "string",
      "pattern": "^\\d{4}-\\d{2}-\\d{2}$",
      "description": "Advisories dated on or after this day (YYYY-MM-DD). Default 14 days ago; reaches back 30 days."
    },
    "package": {
      "type": "string",
      "maxLength": 120,
      "description": "One package name, for example litellm or @modelcontextprotocol/sdk."
    },
    "include_kev": {
      "type": "boolean",
      "default": true,
      "description": "Include CISA KEV entries for AI-stack products added in the window."
    }
  },
  "additionalProperties": false
}

list_cyber_advisories

CISA's advisories, newest first: alerts, joint cybersecurity advisories (#StopRansomware, state-sponsored activity), ICS and ICS-medical advisories, and analysis reports. Each with its kind, date, summary, the CVEs it names and the official page. Filter by kind, date, words, or the AI stack.

read-only

Argument	Type	Description
kind	string	One kind. Asking for one kind reads that kind's own feed, which reaches further back.
limit	integer
query	string	Words in the title, summary or CVEs, for example "ransomware" or "Siemens".
since	string	Only advisories published on or after this day (YYYY-MM-DD).
ai_stack	boolean	true: only advisories that name AI or agent software.

Input schema (JSON)

{
  "type": "object",
  "properties": {
    "kind": {
      "enum": [
        "alert",
        "cybersecurity_advisory",
        "ics_advisory",
        "ics_medical_advisory",
        "analysis_report"
      ],
      "type": "string",
      "description": "One kind. Asking for one kind reads that kind's own feed, which reaches further back."
    },
    "limit": {
      "type": "integer",
      "default": 10,
      "maximum": 40,
      "minimum": 1
    },
    "query": {
      "type": "string",
      "maxLength": 200,
      "description": "Words in the title, summary or CVEs, for example \"ransomware\" or \"Siemens\"."
    },
    "since": {
      "type": "string",
      "pattern": "^\\d{4}-\\d{2}-\\d{2}$",
      "description": "Only advisories published on or after this day (YYYY-MM-DD)."
    },
    "ai_stack": {
      "type": "boolean",
      "description": "true: only advisories that name AI or agent software."
    }
  },
  "additionalProperties": false
}

list_cyber_incident_filings

Cybersecurity incidents public companies report on Form 8-K, newest first: Item 1.05 (the company judged it material) and, unless excluded, Item 8.01 reports made without that judgment. Each with the company, tickers, filing and event dates, items, state, industry code and the EDGAR filing.

read-only

Argument	Type	Description
limit	integer
query	string	Company name, ticker, CIK or state.
since	string	Filed on or after this day (YYYY-MM-DD). Default 90 days ago; Item 1.05 began 2023-12-18.
until	string	Filed on or before this day. Default today.
material_only	boolean	true: only Item 1.05 filings.

Input schema (JSON)

{
  "type": "object",
  "properties": {
    "limit": {
      "type": "integer",
      "default": 10,
      "maximum": 40,
      "minimum": 1
    },
    "query": {
      "type": "string",
      "maxLength": 200,
      "description": "Company name, ticker, CIK or state."
    },
    "since": {
      "type": "string",
      "pattern": "^\\d{4}-\\d{2}-\\d{2}$",
      "description": "Filed on or after this day (YYYY-MM-DD). Default 90 days ago; Item 1.05 began 2023-12-18."
    },
    "until": {
      "type": "string",
      "pattern": "^\\d{4}-\\d{2}-\\d{2}$",
      "description": "Filed on or before this day. Default today."
    },
    "material_only": {
      "type": "boolean",
      "default": false,
      "description": "true: only Item 1.05 filings."
    }
  },
  "additionalProperties": false
}

list_notes

Published desk notes, newest first: entry number, date, title, status, topic (cyber or sanctions), readers, source class, a one-line summary, and the note's URL. Pages with limit and offset; total is the count that matches, next_offset the offset of the next page. Filter by topic or reader as on the desk page.

read-only

Argument	Type	Description
limit	integer	How many notes to return.
since	string	Only notes dated on or after this day (YYYY-MM-DD).
topic	string	cyber (exploited vulnerabilities, advisories, incident filings, the AI stack) or sanctions (everything else).
offset	integer	How many matching notes to skip, for the next page.
reader	string	Only notes written for this reader: sanctions-trade-finance-committee (Sanctions or trade-finance committee), owner-operating-executive (Owner or operating executive), platform-ai-stack-owner (Platform or AI-stack owner), deal-team (Deal team), credit-committee (Credit committee), cyber-underwriter (Cyber underwriter).

Input schema (JSON)

{
  "type": "object",
  "properties": {
    "limit": {
      "type": "integer",
      "default": 20,
      "maximum": 100,
      "minimum": 1,
      "description": "How many notes to return."
    },
    "since": {
      "type": "string",
      "pattern": "^\\d{4}-\\d{2}-\\d{2}$",
      "description": "Only notes dated on or after this day (YYYY-MM-DD)."
    },
    "topic": {
      "enum": [
        "cyber",
        "sanctions"
      ],
      "type": "string",
      "description": "cyber (exploited vulnerabilities, advisories, incident filings, the AI stack) or sanctions (everything else)."
    },
    "offset": {
      "type": "integer",
      "default": 0,
      "maximum": 10000,
      "minimum": 0,
      "description": "How many matching notes to skip, for the next page."
    },
    "reader": {
      "enum": [
        "sanctions-trade-finance-committee",
        "owner-operating-executive",
        "platform-ai-stack-owner",
        "deal-team",
        "credit-committee",
        "cyber-underwriter"
      ],
      "type": "string",
      "description": "Only notes written for this reader: sanctions-trade-finance-committee (Sanctions or trade-finance committee), owner-operating-executive (Owner or operating executive), platform-ai-stack-owner (Platform or AI-stack owner), deal-team (Deal team), credit-committee (Credit committee), cyber-underwriter (Cyber underwriter)."
    }
  },
  "additionalProperties": false
}

list_ofac_actions

OFAC's recent actions, newest first: designations and removals, general licenses, FAQs, regulations and settlements, each with its date, categories and the official page. Filter by date or words in the title.

read-only

Argument	Type	Description
limit	integer
query	string	Words in the title or category, for example "Iran general license".
since	string	Only actions on or after this day (YYYY-MM-DD). Reaches back about 30 actions.

Input schema (JSON)

{
  "type": "object",
  "properties": {
    "limit": {
      "type": "integer",
      "default": 10,
      "maximum": 30,
      "minimum": 1
    },
    "query": {
      "type": "string",
      "maxLength": 200,
      "description": "Words in the title or category, for example \"Iran general license\"."
    },
    "since": {
      "type": "string",
      "pattern": "^\\d{4}-\\d{2}-\\d{2}$",
      "description": "Only actions on or after this day (YYYY-MM-DD). Reaches back about 30 actions."
    }
  },
  "additionalProperties": false
}

list_travel_advisories

US State Department travel advisories, most recently updated first: country, level (1 to 4), the advisory's summary and the official page. Filter by country, minimum level or update date.

read-only

Argument	Type	Description
limit	integer
since	string	Only advisories updated on or after this day (YYYY-MM-DD).
country	string	A country name, or State's two-letter code.
min_level	integer	Only advisories at this level or higher (4 is Do Not Travel).

Input schema (JSON)

{
  "type": "object",
  "properties": {
    "limit": {
      "type": "integer",
      "default": 10,
      "maximum": 50,
      "minimum": 1
    },
    "since": {
      "type": "string",
      "pattern": "^\\d{4}-\\d{2}-\\d{2}$",
      "description": "Only advisories updated on or after this day (YYYY-MM-DD)."
    },
    "country": {
      "type": "string",
      "maxLength": 80,
      "minLength": 2,
      "description": "A country name, or State's two-letter code."
    },
    "min_level": {
      "type": "integer",
      "maximum": 4,
      "minimum": 1,
      "description": "Only advisories at this level or higher (4 is Do Not Travel)."
    }
  },
  "additionalProperties": false
}

search_federal_register

Search Federal Register rules, proposed rules, notices and presidential documents: title, type, agencies, publication and effective dates, citation, abstract and the official document link. Narrow by agency (for example foreign-assets-control-office, industry-and-security-bureau, state-department), type or date.

read-only

Argument	Type	Description
term*	string	Words to find, for example "entity list additions".
type	string	RULE, PRORULE (proposed rule), NOTICE or PRESDOCU (presidential document).
limit	integer
order	string
since	string	Only documents published on or after this day (YYYY-MM-DD).
agency	string	Federal Register agency slug, for example foreign-assets-control-office, treasury-department, industry-and-security-bureau, state-department, homeland-security-department.

Input schema (JSON)

{
  "type": "object",
  "required": [
    "term"
  ],
  "properties": {
    "term": {
      "type": "string",
      "maxLength": 200,
      "minLength": 2,
      "description": "Words to find, for example \"entity list additions\"."
    },
    "type": {
      "enum": [
        "RULE",
        "PRORULE",
        "NOTICE",
        "PRESDOCU"
      ],
      "type": "string",
      "description": "RULE, PRORULE (proposed rule), NOTICE or PRESDOCU (presidential document)."
    },
    "limit": {
      "type": "integer",
      "default": 5,
      "maximum": 20,
      "minimum": 1
    },
    "order": {
      "enum": [
        "newest",
        "relevance"
      ],
      "type": "string",
      "default": "newest"
    },
    "since": {
      "type": "string",
      "pattern": "^\\d{4}-\\d{2}-\\d{2}$",
      "description": "Only documents published on or after this day (YYYY-MM-DD)."
    },
    "agency": {
      "type": "string",
      "pattern": "^[a-z0-9-]+$",
      "description": "Federal Register agency slug, for example foreign-assets-control-office, treasury-department, industry-and-security-bureau, state-department, homeland-security-department."
    }
  },
  "additionalProperties": false
}

search_kev

CISA's Known Exploited Vulnerabilities catalog, newest first: CVE, vendor, product, date added, federal due date, known ransomware use, the required action, FIRST's EPSS estimate, and whether it sits in the AI and agent software stack. Look up one CVE, search vendor or product words, list what was added since a date, or only the AI stack. For one CVE in full, use get_cve.

read-only

Argument	Type	Description
cve	string	One CVE, for example CVE-2025-62593.
limit	integer
query	string	Vendor, product or vulnerability words, for example "fortinet fortios".
since	string	Only entries added on or after this day (YYYY-MM-DD).
ai_stack	boolean	true: only AI and agent software (agent frameworks, MCP, model serving, ML platforms, GPU infrastructure, AI assistants).
ransomware	boolean	true: only entries CISA marks as used in ransomware campaigns.

Input schema (JSON)

{
  "type": "object",
  "properties": {
    "cve": {
      "type": "string",
      "pattern": "^[Cc][Vv][Ee]-\\d{4}-\\d{4,}$",
      "description": "One CVE, for example CVE-2025-62593."
    },
    "limit": {
      "type": "integer",
      "default": 10,
      "maximum": 50,
      "minimum": 1
    },
    "query": {
      "type": "string",
      "maxLength": 200,
      "description": "Vendor, product or vulnerability words, for example \"fortinet fortios\"."
    },
    "since": {
      "type": "string",
      "pattern": "^\\d{4}-\\d{2}-\\d{2}$",
      "description": "Only entries added on or after this day (YYYY-MM-DD)."
    },
    "ai_stack": {
      "type": "boolean",
      "description": "true: only AI and agent software (agent frameworks, MCP, model serving, ML platforms, GPU infrastructure, AI assistants)."
    },
    "ransomware": {
      "type": "boolean",
      "description": "true: only entries CISA marks as used in ransomware campaigns."
    }
  },
  "additionalProperties": false
}

search_notes

Find published notes that mention every word of the query (a name, a list, a country, a program, a date) in the title, summary, sources or body.

read-only

Argument	Type	Description
limit	integer
query*	string	Words to find, for example "Venezuela general license".

Input schema (JSON)

{
  "type": "object",
  "required": [
    "query"
  ],
  "properties": {
    "limit": {
      "type": "integer",
      "default": 5,
      "maximum": 20,
      "minimum": 1
    },
    "query": {
      "type": "string",
      "maxLength": 200,
      "minLength": 1,
      "description": "Words to find, for example \"Venezuela general license\"."
    }
  },
  "additionalProperties": false
}

search_screening_lists

Search the Consolidated Screening List (OFAC SDN and other Treasury lists; BIS Entity, Denied Persons, Unverified and Military End User lists; State ITAR-debarred and nonproliferation lists) by name, alias or identifier (IMO, SWIFT/BIC, registration number). Close spellings match. Each result gives the list, programs, addresses, IDs, remarks and the official list link; the answer says when each list last changed.

read-only

Argument	Type	Description
type	string
limit	integer
lists	array	Only these lists, for example ["SDN", "EL"].
query*	string	A name (person, company, vessel, aircraft) or an identifier.
country	string	Only entries with an address in this country (two-letter code).
min_score	number	How close a name must be. 1 is exact; lower allows more spelling variation.

Input schema (JSON)

{
  "type": "object",
  "required": [
    "query"
  ],
  "properties": {
    "type": {
      "enum": [
        "Individual",
        "Entity",
        "Vessel",
        "Aircraft"
      ],
      "type": "string"
    },
    "limit": {
      "type": "integer",
      "default": 10,
      "maximum": 25,
      "minimum": 1
    },
    "lists": {
      "type": "array",
      "items": {
        "enum": [
          "SDN",
          "SSI",
          "FSE",
          "NS-MBS",
          "CMIC",
          "PLC",
          "CAP",
          "EL",
          "DPL",
          "UVL",
          "MEU",
          "DTC",
          "ISN"
        ],
        "type": "string"
      },
      "description": "Only these lists, for example [\"SDN\", \"EL\"]."
    },
    "query": {
      "type": "string",
      "maxLength": 200,
      "minLength": 2,
      "description": "A name (person, company, vessel, aircraft) or an identifier."
    },
    "country": {
      "type": "string",
      "pattern": "^[A-Za-z]{2}$",
      "description": "Only entries with an address in this country (two-letter code)."
    },
    "min_score": {
      "type": "number",
      "default": 0.9,
      "maximum": 1,
      "minimum": 0.88,
      "description": "How close a name must be. 1 is exact; lower allows more spelling variation."
    }
  },
  "additionalProperties": false
}

Distributed Risk desk

Try it

get_cve Read-only

Distributed Risk desk

Try it

get_cve Read-only

Install

Tools (14)

Security checkA100/100